Freebsd certs not found

[LukeMauldin]

I have a FreeBSD 13 system and I am attempted to connect to an internal resource secured by a custom certificate. I have installed the certificate root public keys in /usr/local/share/certs/ca-root-nss.crt and both curl and openssl s_connect will correctly connect to the endpoint. However, it seems that openssl-probe is not checking that location because I get a certificate error while attempting to run rustup-init. If I specify the environment variable SSL_CERT_FILE=/usr/local/share/certs/ca-root-nss.crt then the program works as expected.

[michael-o]

Your problem in cargo: rust-lang/git2-rs#1129

[michael-o]

Your problem in uv:

$ git diff
diff --git a/src/lib.rs b/src/lib.rs
index 0f63db4..dca4a50 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -28,9 +28,9 @@ use std::{env, fmt, fs, io};
 use pki_types::pem::{self, PemObject};
 use pki_types::CertificateDer;

-#[cfg(all(unix, not(target_os = "macos")))]
+#[cfg(all(unix, not(any(target_os = "macos", target_os = "freebsd"))))]
 mod unix;
-#[cfg(all(unix, not(target_os = "macos")))]
+#[cfg(all(unix, not(any(target_os = "macos", target_os = "freebsd"))))]
 use unix as platform;

 #[cfg(windows)]
@@ -43,6 +43,11 @@ mod macos;
 #[cfg(target_os = "macos")]
 use macos as platform;

+#[cfg(target_os = "freebsd")]
+mod freebsd;
+#[cfg(target_os = "freebsd")]
+use freebsd as platform;
+
 /// Load root certificates found in the platform's native certificate store.
 ///
 /// ## Environment Variables
cafe-custom-uis@deblndw013x3j:/usr/home/cafe-custom-uis/rustls-native-certs (main *%=)
$ cat src/freebsd.rs
use crate::{CertPaths, CertificateResult};
use std::path::PathBuf;

pub fn load_native_certs() -> CertificateResult {
    CertPaths {
        file: Some(PathBuf::from("/etc/ssl/cert.pem")),
        dirs: vec![PathBuf::from("/etc/ssl/certs")],
    }
    .load()
}

I see now that this is not only used for OpenSSL, but rustls which has zero knowledge of OpenSSL default trust locations. I will provide a PR for this for FreeBSD.